Vulnerabilities in microsoft

9,326 results
Vexday analysis

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-26631HIGHVisual Studio Code Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-43631MEDIUMWindows Secure Kernel Mode Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-55052HIGHMicrosoft SharePoint Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-43646MEDIUMWindows Secure Kernel Mode Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-47301HIGHConfiguration Manager Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-33055MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-33062MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-43645MEDIUMWindows Defender Application Control (WDAC) Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2026-50475MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-26143HIGHMicrosoft PowerShell Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2025-24078HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-54568MEDIUMMicrosoft UFO: Missing Authorization in DEVICE_INFO_REQUEST Allows a DEVICE Client to Read Another Device's system_infoEPSS 0.5%CVE-2026-50439HIGHMicrosoft Message Queuing Queue Manager Remote Code Execution VulnerabilityEPSS 0.5%CVE-2022-35820HIGHWindows Bluetooth Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-33826HIGHWindows Active Directory Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-20829MEDIUMTPM Trustlet Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-20835MEDIUMCapability Access Management Service (camsvc) Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-26679HIGHRPC Endpoint Mapper Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-40412CRITICALAzure Orbital Spatio Remote Code Execution VulnerabilityEPSS 0.5%CVE-2022-30151HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.5%